Effective date: 23 August 2026

1. Who we are

Say What? is operated by Sara Goode Coaching and Consulting (“we”, “us” or “our”).

For privacy questions or requests, contact:

Email: sara@saragoode.com

For UK data-protection purposes, Sara Goode Coaching and Consulting is the data controller for personal information processed through Say What?.

2. About Say What?

Say What? helps adults find wording for difficult, personal or everyday conversations.

The app uses artificial intelligence to generate suggested wording from information supplied by the user. It also includes an optional “Completely Unhinged” feature that creates clearly comedic responses for entertainment only.

Say What? is intended for people aged 18 and over.

How the guidance is designed

Say What? uses artificial intelligence to generate individual responses, but the AI does not independently determine the app’s communication approach.

The prompts, response structures, safety boundaries and guidance used by Say What? are designed by Sara Goode and informed by The Goode Method.

These principles are intended to help responses:

• preserve what the user genuinely means;

• encourage clarity without unnecessary escalation;

• avoid manipulation, diagnosis and unsupported assumptions about another person’s intentions;

• distinguish observations from interpretations;

• respect the user’s agency and legitimate boundaries;

• avoid discriminatory, coercive or deliberately harmful communication; and

• encourage understanding without excusing harmful behaviour.

The AI applies these instructions to the situation provided by the user. Individual responses are generated automatically and are not personally written or reviewed by Sara Goode before being displayed.

3. Information we process

Information you enter

When using Say What?, you may provide information such as:

• a description of the situation;

• the type of relationship involved;

• additional relationship context;

• what you want the other person to understand;

• what you would like to happen next;

• an existing draft;

• your preferred tone; and

• answers to any clarification questions.

Please avoid entering names, addresses, contact details or other identifying information unless genuinely necessary. You should not submit information about another person that you do not have a lawful reason to share.

Generated responses

The app processes AI-generated wording, reflections and guidance so that they can be displayed to you.

Technical information

Our service providers may process limited technical information needed to deliver and secure the service. This may include:

• IP address;

• request date and time;

• request and response status;

• device, browser or network information;

• request identifiers; and

• diagnostic or security information.

We do not use this information to build advertising profiles or track you across other apps or websites.

Information stored on your device

Say What? stores only limited settings on your device:

• a record that you accepted the privacy notice; and

• for Completely Unhinged, the current date, the number of successful generations used that day and identifiers for the humour styles already used.

The Completely Unhinged quota record does not contain your scenario, drafts or generated messages.

4. How we use information

We process information to:

• generate the wording you request;

• adapt the result to your chosen situation and tone;

• perform safety checks;

• decide whether clarification is needed;

• prevent unsafe response types from being displayed;

• operate the Completely Unhinged feature;

• maintain security and service reliability;

• investigate technical failures or abuse; and

• comply with legal obligations.

We do not sell personal information, use it for targeted advertising or share it with data brokers.

5. Artificial intelligence processing

Say What? uses OpenAI as the technology provider that generates individual responses.

The communication framework, prompts, response requirements and safety rules supplied to the AI have been designed for Say What? and are informed by The Goode Method. OpenAI processes the information submitted by the user within those instructions to produce the requested response.

Text submitted to Say What? is sent securely through our server-side function to OpenAI. The OpenAI API request is configured with store: false, which disables Responses API application-state storage. OpenAI states that API data is not used to train its models by default unless the customer has explicitly opted in.

Under OpenAI’s standard API data controls, prompts and responses may nevertheless be retained for up to 30 days for abuse monitoring and security purposes.

You can read more in OpenAI’s API data controls documentation and Privacy Policy.

AI-generated wording may be inaccurate or unsuitable. You should review any response carefully and decide for yourself whether to use it.

6. Our service providers

We use the following service providers:

Supabase

Supabase hosts the Edge Function that receives requests from the app and securely makes the AI request. Supabase may process technical and operational metadata associated with those requests.

Say What? does not use Supabase database tables, user accounts or message-history storage.

Read the Supabase Privacy Policy.

OpenAI

OpenAI processes the scenario information supplied by the user to generate the requested response and apply AI-assisted safety checks.

Read the OpenAI Privacy Policy.

We may also disclose information if required by law, necessary to protect someone’s safety, or required to investigate fraud, misuse or a security incident.

7. How long information is kept

Say What? does not maintain accounts, conversation histories or a database of user messages.

Your form answers, drafts, clarification answers and generated responses are held temporarily in the app’s active memory. They are discarded when the session is cleared or the app is closed.

The privacy-acceptance record remains on your device until the app’s data is cleared or the app is uninstalled.

The Completely Unhinged quota record is overwritten as the quota changes and resets when the local calendar date changes.

Our service providers may retain limited technical or security information according to their own retention policies. OpenAI’s standard abuse-monitoring retention may last for up to 30 days.

If you contact us by email about a privacy request, we may retain the correspondence for as long as reasonably necessary to answer the request, maintain an appropriate record and comply with legal obligations.

8. Lawful bases

Under UK data-protection law, we rely on:

• Performance of a contract or steps taken at your request when processing information to provide the response you requested.

• Legitimate interests when securing, maintaining and improving the reliability of the service, preventing abuse and investigating technical problems.

• Legal obligation where information must be processed or disclosed to comply with the law.

• Consent, where consent is specifically requested or legally required.

Some situations entered into the app may reveal sensitive or “special category” information, such as information about health, sexuality, racial or ethnic origin, religious beliefs or political opinions. Please include this only when genuinely necessary. Where applicable, we rely on your explicit consent to process information that you voluntarily submit for the purpose of generating your response.

You can withdraw consent for future processing by no longer submitting content and by contacting us. Withdrawal does not affect processing that was lawful before consent was withdrawn.

9. International transfers

Supabase and OpenAI may process information outside the United Kingdom.

Where personal information is transferred internationally, we rely on applicable protections used by our service providers, which may include adequacy regulations and approved contractual safeguards.

More information is available in the service providers’ privacy policies and data-processing terms.

10. Security

We use reasonable technical and organisational measures designed to protect information during transmission and processing.

The OpenAI API key is stored as a server-side secret and is not included in the app. User message content is not intentionally written to application analytics or error logs.

No online service can guarantee absolute security. Please avoid including information that is unnecessary for generating your response.

11. Automated processing

Say What? uses automated processing to:

• generate suggested wording;

• classify communication and safety context;

• request clarification when needed; and

• block or replace certain outputs where a situation appears unsafe or harmful.

This processing does not make decisions that produce legal or similarly significant effects about you.

12. Your rights

Depending on the circumstances, UK data-protection law may give you the right to:

• request access to your personal information;

• ask for inaccurate information to be corrected;

• request deletion;

• ask us to restrict processing;

• object to certain processing;

• request data portability;

• withdraw consent; and

• complain to the Information Commissioner’s Office.

Because Say What? does not maintain user accounts or store conversation histories, we may no longer possess your submitted content by the time you contact us.

To exercise your rights, email sara@saragoode.com.

You can also complain to the UK Information Commissioner’s Office:

Make a data-protection complaint to the ICO

13. Children

Say What? is intended only for people aged 18 or over.

We do not knowingly offer the app to children or knowingly collect personal information from anyone under 18. If you believe that a child has submitted information, contact us so that we can investigate.

14. Changes to this policy

We may update this policy when the app, our service providers or legal requirements change.

The effective date at the top of this policy will show when it was last updated. Material changes may also be communicated through the app.

15. Contact

Questions, concerns and privacy requests can be sent to:

Sara Goode Coaching and Consulting
Email: sara@saragoode.com